Which properties an auth-realm element uses
depends on the value of the auth-realm element’s name attribute. The file realm uses file and jaas-context properties. Other
realms use different properties.

Specifies the file that stores user names, passwords, and group
names. The default is domain-dir/config/keyfile.

assign-groups

certificate, file, jdbc, ldap, solaris

(optional) If this property is set, its value is taken to be
a comma-separated list of group names. All clients who present valid certificates are assigned
membership to these groups for the purposes of authorization decisions
in the web and EJB containers.

directory

ldap

Specifies the LDAP URL to your server.

base-dn

ldap

Specifies the LDAP base DN for the location of user data. This
base DN can be at any level above the user data, since a tree scope
search is performed. The smaller the search tree, the better the performance.

search-filter

ldap

(optional) Specifies the search filter to use to find the user.
The default is uid=%s (%s expands
to the subject name).

group-base-dn

ldap

(optional) Specifies the base DN for the location of groups
data. By default, it is same as the base-dn, but
it can be tuned, if necessary.

group-search-filter

ldap

(optional) Specifies the search filter to find group memberships
for the user. The default is uniquemember=%d (%d expands to the user element DN).

group-target

ldap

(optional) Specifies the LDAP attribute name that contains group
name entries. The default is CN.

search-bind-dn

ldap

(optional) Specifies an optional DN used to authenticate to
the directory for performing the search-filter lookup.
Only required for directories that do not allow anonymous search.

search-bind-password

ldap

(optional) Specifies the LDAP password for the DN given in search-bind-dn .

Specifies the name of the user name column in the database's
user table.

password-column

jdbc

Specifies the name of the password column in the database's
user table.

group-table

jdbc

Specifies the name of the group table in the database.

group-name-column

jdbc

Specifies the name of the group name column in the database's
group table.

db-user

jdbc

(optional) Allows you to specify the database user name in the
realm instead of the jdbc-connection-pool.
This prevents other applications from looking up the database, getting
a connection, and browsing the user table. By default, the jdbc-connection-pool configuration is used.

db-password

jdbc

(optional) Allows you to specify the database password in the
realm instead of the jdbc-connection-pool.
This prevents other applications from looking up the database, getting
a connection, and browsing the user table. By default, the jdbc-connection-pool configuration is used.

digest-algorithm

jdbc

(optional) Specifies the digest algorithm. The default is MD5. You can use any algorithm supported in the JDK, or none.

encoding

jdbc

(optional) Specifies the encoding. Allowed values are Hex and Base64. If digest-algorithm is specified,
the default is Hex. If digest-algorithm is
not specified, by default no encoding is specified.